MalGamy12 f472015599 Merge PR #5037 from @MalGamy12 - Update Disable Windows Defender Functionalities Via Registry Keys ...

update: Disable Windows Defender Functionalities Via Registry Keys - Remove `\Real-Time Protection\` prefix to increase coverage. 

---------

Co-authored-by: nasbench <8741929+nasbench@users.noreply.github.com>

2024-10-08 22:07:45 +02:00

..

builtin

Merge PR #4935 from @frack113 - Add new IIS logsource and related rules

2024-10-06 22:44:05 +02:00

create_remote_thread

Merge PR #5027 from @nasbench - Promote older rules status from experimental to test

2024-10-01 14:56:09 +02:00

create_stream_hash

Merge PR #4954 from @omaramin17 - Update multiple rules with additional sharing domains

2024-08-23 11:16:06 +02:00

dns_query

Merge PR #5027 from @nasbench - Promote older rules status from experimental to test

2024-10-01 14:56:09 +02:00

driver_load

Merge PR #5027 from @nasbench - Promote older rules status from experimental to test

2024-10-01 14:56:09 +02:00

file

Merge PR #5038 from @Neo23x0 - Update LSASS Process Memory Dump Files

2024-10-08 21:57:25 +02:00

image_load

Merge PR #5031 from @swachchhanda000 - Add Potential Python DLL SideLoading

2024-10-06 22:51:09 +02:00

network_connection

Merge PR #5027 from @nasbench - Promote older rules status from experimental to test

2024-10-01 14:56:09 +02:00

pipe_created

Merge PR #4991 from @nasbench - Promote older rules status from experimental to test

2024-09-02 10:01:36 +02:00

powershell

Merge PR #5027 from @nasbench - Promote older rules status from experimental to test

2024-10-01 14:56:09 +02:00

process_access

Merge PR #5027 from @nasbench - Promote older rules status from experimental to test

2024-10-01 14:56:09 +02:00

process_creation

Merge PR #5012 from @ionsor - Update Potentially Suspicious JWT Token Search Via CLI

2024-10-06 23:03:54 +02:00

process_tampering

Merge PR #5027 from @nasbench - Promote older rules status from experimental to test

2024-10-01 14:56:09 +02:00

raw_access_thread

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00

registry

Merge PR #5037 from @MalGamy12 - Update Disable Windows Defender Functionalities Via Registry Keys

2024-10-08 22:07:45 +02:00

sysmon

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00

wmi_event

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00